Read the docs

vifm

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

vifm records in CISA KEV

No vifm vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-73453 CVE-2026-110237 · GHSA-vf53-5m97-qg59

Unverified IPC FIFO in Vifm lets local users run commands as others

Priority LOW 32

Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user.

CVSS 4.0HIGH 7.0 Local Low privileges User interaction EPSS 0.00149 Published 2026-10-13 No fix listed CWE-283
TI-2026-07914 CVE-2026-8997 · GHSA-3623-vc46-pwpv

Heap Buffer Overflow in vifm

Priority LOW 21

vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json).

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.0014 Published 2026-05-22 No fix listed CWE-122
Open these records in search →